Network Security Engineer

This person will work closely with network, security operations, cloud, and application teams to improve firewall governance, segmentation, secure access, threat visibility, and operational resilience. The ideal candidate combines strong enterprise networking fundamentals with practical experience in modern security platforms and automation.

What You’ll Do

• Design, implement, and support next-generation firewall policies, secure connectivity, and network-security controls across enterprise environments.
• Help enhance Zero Trust and segmentation initiatives by reducing unnecessary access between applications, workloads, users, and network zones.
• Support remote-access and secure connectivity services, including VPN, identity-aware access, and endpoint posture-based controls.
• Build and maintain automated workflows for policy validation, configuration review, compliance reporting, operational checks, and security change management.
• Partner with security operations teams to investigate suspicious traffic, policy violations, connectivity issues, and high-priority incidents.
• Improve visibility and protection for internet-facing applications through web-security, intrusion-prevention, and threat-detection technologies.
• Participate in security architecture reviews, production changes, incident response, root-cause analysis, and continuous improvement initiatives.
• Create and maintain technical documentation, implementation plans, operational procedures, and recovery/runbook materials.
• Mentor junior engineers and serve as a technical escalation resource for complex network-security issues.

• 8+ years of experience in network engineering, network security, firewall engineering, or a similar enterprise infrastructure role.
• Strong hands-on experience with next-generation firewalls and centralized security-policy management; Palo Alto Networks experience is highly preferred.
• Experience designing or supporting enterprise segmentation, workload protection, Zero Trust, access-control, or least-privilege initiatives.
• Familiarity with remote-access technologies, secure connectivity, identity-based access controls, and VPN troubleshooting.
• Experience with security technologies such as WAF, IDS/IPS, network detection/response, SIEM, NAC, threat prevention, SSL/TLS inspection, or similar controls.
• Strong troubleshooting ability across routing, DNS, NAT, VPN, application connectivity, packet captures, and traffic-flow analysis.
• Experience using Python, Ansible, APIs, or similar tools to automate network/security operations.
• Interest or practical experience applying AI-assisted workflows to security analysis, policy review, alert triage, documentation, or operational efficiency.
• Familiarity with cloud networking and security in AWS, Azure, Google Cloud Platform, or hybrid environments is a plus.
• Ability to communicate technical risk clearly, work across teams, and operate effectively during production incidents and change windows.

Preferred Background

• Experience with Palo Alto platforms, centralized firewall management, secure remote access, and security-policy governance.
• Exposure to workload or application segmentation platforms such as Illumio, Cisco ACI, NSX, cloud-native controls, or equivalent technologies.
• Experience with network-access-control platforms such as Cisco Client, Aruba ClearPass, or Forescout.
• Experience with application-security controls such as Cloudflare, Akamai, F5, Imperva, AWS WAF, or comparable platforms.
• Certifications such as PCNSE, CCNA/CCNP, CISSP, Security+, or relevant vendor certifications are beneficial.